CVE-2017-13180

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1

Description: The issue is related to a possible out-of-bounds write due to a use after free in the onQueueFilled function of SoftAVCDec. This could occur if a bad header causes the decoder to get caught in a loop while another thread frees the memory it's accessing, potentially leading to a local elevation of privilege. This could enable code execution as a privileged process with no additional execution privileges needed. User interaction is not required for exploitation.

Recommendations: For Android versions 6.0 through 8.1, update to a version that contains a fix for this issue to prevent potential exploitation.